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@ A data processing system has a security 
mechanism to lock up a secured Input device, 
such as a keyboard, after the secured input 
device has been inactive or unused after a 
predetermined event such as the expiration of 
a period of time, has occurred. Multimedia Input 
devices are used to provide alternatives to the 
secured input device. Activation of the security 
mechanism is delayed when using an alternate 
or multimedia input device by providing an 
emulating input to the security mechanism. The 
emulating input simulates an input produced by 
the secured input device. The emulating input is 
produced before the predetermined event oc- 
curs if the alternate input device has produced 
an Input Furthermore, some alternate input 
devices, such as voice recognition systems, 
have general input properties and provide 
non-user inputs, such as background noise. 
Therefore, user inputs are distinguished from 
non-user inputs so that non-user inputs do not 
delay activation of the security mechanism. 
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Fig. 1 is a block diagram showing the data pro- 
cessing system of the present invention, in accordan- 
ce with a preferred embodiment 

Fig. 2 is a component flow diagram of the present 
invention. 

- Figs. 3-5 are flow charts showing the method of 
the present invention, in accordance with a preferred 
embodiment Fig. 3 showsthe registration process for 
registering input devices. Fig. 4 shows the monitor 
process that determines if an input is a user input from 
a registered input device. Fig. 5 shows the activator 
process for emulating an input from a keyboard in or- 
der to prevent the activation of the security mecha- 
nism. 

Fig. 6 illustrates the elements in an attribute state. 

In Fig. 1, there is shown a data processing sys- 
tem 11 of the present invention. The system 1 1 has a 
central processor 13 which has memory located the- 
rein. A user interface is connected to the processor 
13^ The user interface includes an output device in 
the form of a display 1 5 and input devices in the form 
of a mouse 17, a keyboard 1 9, a voice input device 21 
and a pen tablet 23. All of the input and output devices 
are connected to the processor 1 3. A memory device 
In the form of a hard disk storage device 25 is connec- 
ted to the processor. An input media device 27 is also 
connected to the processor 13. The input media de- 
vice 27 receives a disk 29 or other type of computer 
readable medium. The disk 29 has computer program 
logic recorded thereon, which logic implements the 
present invention. There is also provided a printer 31 
connected with the processor 13. 

In Fig. 2, there is shown a component flow dia- 
gram of the various hardware and software compo- 
nents of the present invention. The software compo- 
nents reside In the data processing system. Ail of the 
Input devices 17, 19, 21, 23 are connected so as to 
send their respective interrupts to an interrupt routine 
41 . The interrupt routine 41 is associated with one of 
the input devices, typically the keyboard 19. The out- 
put of the interrupt routine 41 communicates with a 
security mechanism 43 through a co-resident inter- 
cept handler 45. The security mechanism 43 is a pro- 
gram that is executed on the data processing system 
1 1 . The co-resident intercept handler 45 is co-resident 
in memory with the security mechanism 43. The se- 
curity mechanism 43 typically looks for interrupts 
from the secured input device (such as the keyboard 
1 9). If a secured input device interrupt is not received 
within a predetermined period of time, the security 
mechanism locks the secured input devices and the 
other input devices. In addition, the co-resident inter- 
cept handler 45 communicates with whatever applica- 
tion program 44 or programs are being executed. A ti- 
mer service 47 bidirectionally communicates with the 
co-resident intercept handler 45. A threshold monitor 
49 also bidirectionally communicates with the co-re- 
sident intercept handler 45. The timer service 47 is 



the clock of the data processing system 11. The 
threshold monitor 49 is used to distinguish a user in- 
put from the non-user input Two user interfaces are 
provided. A registration interface 51 communicates 

5 with the co-resident intercept handler 45. An ena- 
ble/disable interface 53 bidirectionally communicates 
with the co-resident intercept handler 45. The inter- 
face 53 is used to enable and disable the co-resident 
interrupt service. 

10 The method of the present invention will now be 
described with reference to the flowcharts of Figs. 3- 
5. In the flow charts, the following graphical conven- 
tions are observed: a diamond for a test or decision 
and a rectangle for a process or function. These 

15 conventions are well understood by those skilled in 
the art, and the flow charts are sufficient to enable 
one skilled in the art to write code In any suitable 
computer programming language, such as BASIC, 
PASCAL or C for a computer such as the IBM Perso- 

20 nal System/2 (PS/2) family of computers which sup- 
ports these languages. 

When the user installs at his user interface an al- 
ternate input device that is not a device that the se- 
curity mechanism 43 is sensitive to, he must register 

25 that alternate input device. Registration allows Input 
interrupts from the device to be identified as such, 
thus providing for the continued disabling of the se- 
curity mechanism. Registration occurs through the 
registration interface 51. 

30 The registration process Is shown in Fig. 3. The 
registration process is started and initialized, step 61 , 
when a user seeks to register an input device. In the 
first step 63, the process gets the interrupt of the se- 
cured input device. In the discussion that follows, the 

35 keyboard 1 9 will be used as an example of the secu- 
red input device and the voice Input device 21 will be 
used as an example of the alternate input device. This 
step identifies which channel the keyboard interrupt 
is operating on. The next step 65 gets the interrupt of 

40 the voice input device 21 which is being registered. In 
steps 67 and 69, the two interrupts are checked for 
validity and accuracy. In step 67, a valid interrupt ta- 
ble is accessed. In step 69, the determination is made 
if interrupts are valid by comparing the interrupts 

45 against the valid interrupt table. If NO, the interrupts 
are not valid, the method proceeds to step 71 , where 
the error is reported to the user. Then, the determi- 
nation is made if the registration process is exited, 
step 73. If NO, then the method loops back to step 63 

so to try again. If YES, then the method stops, step 75. 
If the result of step 69 is YES, the interrupts are 
valid, then the method gets the threshold value, step 
77. Typically, this is user supplied. The threshold va- 
lue is used to decide if an input on the voice input de- 

55 vice 21 is a user input or a non-user input (such as 
background noise on a voice recognition device). One 
way to express the threshold value is by a confidence 
factor. For example, the audio input of the voice input 



EP 0 549 511 A1 



if the voice input device 21 has been activated. If the 
result of step 121 is NO, then the method loops back 
to step 115 for a re-reading of the attribute state 83 to 
check if any registered input device has been activa- 
ted or used since the last reading. If YES, then the 
method proceeds to step 123, where an emulation in- 
put is produced and sent to the security mechanism 
43. The emulation input, which uses the emulation 
key, emulates an input from the secured input device, 
and thus prevents the security mechanism from 
locking the input devices 17, 19, 21, 23. Then, the 
method loops back to step 115 to again await reading 
the attribute state. 

An advantage of the present invention is that it 
can be retrofitted into existing security mechanism 
systems. The co-resident intercept handler 45 of Fig. 
2 is interposed between the Interrupt routine 41 and 
the security mechanism 43, so as to intercept inputs 
before they reach the security mechanism. By inter- 
cepting the inputs of the alternate devices, the co-re- 
sident intercept handler can produce an emulating in- 
put 

Although the present invention has been descri- 
bed in conjunction with the occurrence of a particular 
predetermined event, namely the expiration of a pe- 
riod of time during which a particular Input device has 
been inactive, the present invention can be used in 
conjunction with other types of predetermined 
events. For example, an external event (external to 
the data processing system) can be used as criteria 
for activating the security mechanism. An example of 
such an external event includes when a user's tele- 
phone is not a swered. Without the present invention, 
failure to answer the user's telephone would result in 
the security mechanism being activated. However, 
with the present invention, input from an alternate de- 
vice would delay the activation of the security mecha- 
nism even if the user's telephone was not answered. 
In addition, an event, whether internal or external, 
could be defined as inactivity for the purpose of acti- 
vating the security mechanism, or activity for the pur- 
pose of delaying the activation of the security mecha- 
nism. An example of an event that could be defined 
either as inactivity or activity would be the use of sha- 
red memory. 

The predetermined event could be defined over 
the entire data processing system, or it could be de- 
fined for a single user interface. 

Although the present invention has been descri- 
bed with external input devices, internal processes 
and applications could be used as well. Applications 
which emulate external devices can benefit from the 
present invention. 

The foregoing disclosure and the showings made 
in the drawings are merely illustrative of the principles 
of this invention and are not to be interpreted in a li- 
miting sense. 



Revendicatlons 

1. In a data processing system having a user inter- 
face, said user interface having respective first 

5 and second input means for providing respective 

first and second inputs into said data processing 
system, said data processing system having 
means for securing said user interface such that 
after a predetermined event has occurred 

10 without said first input from saW first input means 
occurring, said securing means securing said 
first input means to prevent further information 
from being input by said first Input means, the im- 
provement comprising a method for delaying said 

15 securing means from securing said first input 
means, said method comprising the steps of: , 

a) determining if, in the absence of said first 
input from said first input means, said second 
input means provides said second input befo- 

20 re the occurrence of said predetermined 

event; and 

b) providing an emulating input to said secu- 
ring means if said second input means has 
provided said second input before the oo- 

25 currence of said predetermined event, said 

emulating input emulating said first input from 
said first input means. 

2. The method of claim 1 wherein said second input 
30 from said second input means comprises a user 

input and a non-user input further comprising 
the steps of: 

a) determining if said second input Is said user 

input; and 

35 b) providing said emulating input if said se- 

cond input is said user input 

3. The method of claim 2 wherein said step of deter- 
mining if said second input is said user input 

40 comprises the step of comparing of said second 
input to a predetermined user input 

4. The met hod of claim 1 wherein said step of deter- 
' mining if said second input is provided by said se- 

45 cond input means comprises the step of monito- 
ring interrupts from said second input means. 



The method of claim 1 further comprising the 
step of selecting said emulating input such that 
said emulating input has a null effect on an appli- 
cation process receiving said first and second in- 
puts. 
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The method of claim 1 wherein said predetermi- 
ned event comprises an expiration of a predeter- 
mined period of time, further comprising the 
steps of: 

a) determining when said predetermined pe- 
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